When reporting a HIPAA violation, besides notifying the client, who else should be notified, depending on the extent of the breach?
a) The secretary of HHS
b) Major news media outlets
c) The director of APD 1
d) Department of legal affairs